Dart

Create JWT Using HS256, HS384, or HS512

See more JSON Web Token (JWT) Examples

Demonstrates how to create a JWT using HS256, HS384, or HS512. (HS256 is JWT's acronym for HMAC-SHA256.) When HMAC is used, the secret is a shared secret (i.e. password) that both client and server know beforehand.

This example also demonstrates how to include time constraints:

• nbf: Not Before Time
• exp: Expiration Time
• iat: Issue At Time

Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // Demonstrates how to create an HMAC JWT using a shared secret (password).

  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  final jwt = CkJwt();

  // Build the JOSE header
  final jose = CkJsonObject();
  // Use HS256.  Pass the string "HS384" or "HS512" to use a different algorithm.
  jose.appendString('alg', 'HS256');
  jose.appendString('typ', 'JWT');

  // Now build the JWT claims (also known as the payload)
  final claims = CkJsonObject();
  claims.appendString('iss', 'http://example.org');
  claims.appendString('sub', 'John');
  claims.appendString('aud', 'http://example.com');

  // Set the timestamp of when the JWT was created to now.
  final curDateTime = jwt.genNumericDate(0);
  claims.addIntAt(-1, 'iat', curDateTime);

  // Set the "not process before" timestamp to now.
  claims.addIntAt(-1, 'nbf', curDateTime);

  // Set the timestamp defining an expiration time (end time) for the token
  // to be now + 1 hour (3600 seconds)
  claims.addIntAt(-1, 'exp', curDateTime + 3600);

  // Produce the smallest possible JWT:
  jwt.autoCompact = true;

  final strJwt = jwt.createJwt(jose.emit(), claims.emit(), 'secret');

  print(strJwt);
}